Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3773b35-d504-3d17-b98f-67e367ad62ea.roa
File: d3773b35-d504-3d17-b98f-67e367ad62ea.roa (raw, json)
Hash identifier: 8/7auUWhwBfBlpfzCfm+e7zTNahnOL/QWQtP7W+3Fcc=
Subject key identifier: 41:AF:A4:22:5A:79:BD:94:E5:26:D1:C6:DE:98:F8:48:27:F6:CA:80
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CD38C1E65CDAFE1BA600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3773b35-d504-3d17-b98f-67e367ad62ea.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.35.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:cd:38:c1:e6:5c:da:fe:1b:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=fe42ec98-6211-47ff-9827-ed790cb60c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:d9:f6:71:19:f7:49:14:9f:6e:69:59:c8:
e6:89:d9:c2:47:cc:eb:e3:17:97:60:fa:4e:02:1f:
bd:ca:7f:e2:c0:bd:e0:de:1b:41:db:7b:7b:ce:75:
e7:47:bf:ec:82:a4:dd:6f:de:35:8d:9b:47:6e:9f:
95:67:eb:86:97:3e:bc:01:17:7d:f9:69:7b:58:cd:
e6:fa:c6:e5:b1:aa:de:27:eb:39:76:f9:74:4a:0f:
ea:11:e5:d2:08:74:6b:02:fa:22:16:34:e6:53:60:
ce:54:14:f2:cf:02:2f:4f:e8:b1:3b:d2:bb:fb:61:
cd:2a:36:d9:12:06:3a:b9:54:92:de:b5:e5:17:ae:
5b:f4:c9:3f:4b:38:4d:88:91:90:ac:c5:f9:5c:2a:
0a:8c:8a:ee:ed:ed:d9:85:69:56:ab:3b:8c:11:c2:
a2:c9:a9:b1:8b:60:aa:cb:3e:88:78:59:23:ec:64:
fe:c1:41:ef:f6:f4:35:30:b8:a2:a7:27:64:0d:d0:
c2:50:f6:0f:85:74:48:9c:26:2d:16:9a:0d:4e:c2:
0b:ee:8e:6c:32:f0:23:b1:b8:e8:10:71:ee:e3:fb:
64:00:6d:7f:fd:08:f4:b2:82:b5:2c:f9:e2:5d:a3:
45:22:d1:97:6d:6b:ed:12:e7:f8:26:48:c1:b6:7f:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:A4:22:5A:79:BD:94:E5:26:D1:C6:DE:98:F8:48:27:F6:CA:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d3773b35-d504-3d17-b98f-67e367ad62ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ac:d5:ce:25:1d:44:04:13:78:bc:44:76:7b:68:e0:31:b4:
5e:2d:b9:7f:55:ea:13:85:09:a1:3c:b2:fd:94:35:92:5f:8e:
44:b3:8d:ed:e1:05:7a:82:2d:cc:ba:c8:db:d9:b4:ec:5d:ae:
19:95:f5:e8:97:ae:c3:fb:07:c6:77:6a:05:52:d8:84:0a:ff:
56:5d:08:a7:f3:e7:94:dc:b6:d1:4a:a2:6c:3d:06:91:cb:75:
ca:20:2c:a2:3b:d8:50:19:d1:f6:c4:6c:28:66:6a:5c:4a:db:
d1:b1:4d:af:6e:d8:fc:be:50:c2:fc:1d:0a:12:c5:c0:d7:dc:
39:63:bc:d6:85:b8:3a:05:c8:08:3e:1b:f7:4f:a0:d6:61:8c:
f7:5d:50:ea:69:4d:c2:e5:89:75:94:de:90:7b:26:80:03:f0:
c0:f6:c1:0c:76:ef:81:90:f7:ea:74:c9:7c:79:29:d9:e7:16:
ff:b7:14:c6:f5:2e:f0:9f:c8:b1:c1:fa:83:c4:58:f0:d2:34:
56:0d:7e:1b:7a:fa:48:c6:7f:3f:35:31:5b:63:1e:d9:06:5c:
58:a7:72:70:b1:b8:d0:b5:af:3a:5b:25:c3:4e:17:d0:68:ff:
00:39:0d:96:4a:80:ce:f4:76:ad:5a:50:a0:01:90:42:60:8f:
a0:31:3a:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9c04weZc2v4bpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZmU0MmVjOTgtNjIxMS00N2ZmLTk4MjctZWQ3OTBjYjYwYzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf3Z9nEZ90kUn25pWcjmidnCR8zr4xeXYPpO
Ah+9yn/iwL3g3htB23t7znXnR7/sgqTdb941jZtHbp+VZ+uGlz68ARd9+Wl7WM3m
+sblsareJ+s5dvl0Sg/qEeXSCHRrAvoiFjTmU2DOVBTyzwIvT+ixO9K7+2HNKjbZ
EgY6uVSS3rXlF65b9Mk/SzhNiJGQrMX5XCoKjIru7e3ZhWlWqzuMEcKiyamxi2Cq
yz6IeFkj7GT+wUHv9vQ1MLiipydkDdDCUPYPhXRInCYtFpoNTsIL7o5sMvAjsbjo
EHHu4/tkAG1//Qj0soK1LPniXaNFItGXbWvtEuf4JkjBtn+VIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEGvpCJaeb2U5SbRxt6Y+Egn9sqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDM3NzNiMzUtZDUwNC0z
ZDE3LWI5OGYtNjdlMzY3YWQ2MmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyNCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADms1c4lHUQEE3i8RHZ7aOAxtF4tuX9V6hOFCaE8sv2UNZJfjkSzje3h
BXqCLcy6yNvZtOxdrhmV9eiXrsP7B8Z3agVS2IQK/1ZdCKfz55TcttFKomw9BpHL
dcogLKI72FAZ0fbEbChmalxK29GxTa9u2Py+UML8HQoSxcDX3DljvNaFuDoFyAg+
G/dPoNZhjPddUOppTcLliXWU3pB7JoAD8MD2wQx274GQ9+p0yXx5KdnnFv+3FMb1
LvCfyLHB+oPEWPDSNFYNfht6+kjGfz81MVtjHtkGXFincnCxuNC1rzpbJcNOF9Bo
/wA5DZZKgM70dq1aUKABkEJgj6AxOtM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:30 2025 by rpki-client